Australia (Flexible), Australia
Onsite
Job Summary
Who We Are
We're an iconic Aussie brand with a global footprint. Our purpose is to build a connected future so everyone can thrive. We're all about providing the best experience and delivering the best tech on the best network.
This includes making Telstra the place you want to work. For you, that means a having career that grows with you and working with a team powered by human connection that prioritises wellbeing and choice.
What We Offer
Performance-related pay
Access to thousands of learning programs so you can level-up
Global presence across 22 countries; opportunities to work where we do business.
Purchased annual leave scheme
Additional Telstra day off
Additional 30% off Telstra products and services
Toolkit provided (laptop + mobile phone + plan paid for)
What You’ll Do
Global Networks & Technology - Security & Operations is responsible for Telstra's security and operations, protecting Telstra's assets and infrastructure.
The role works directly on production security infrastructure, embedding controls into live systems, integrating with applications and APIs, and responding to incidents as they occur. A significant focus of the role is securing APIs used across the Telstra Group.
Key Responsibilities
Implement and operate security controls protecting applications, services, and APIs.
Design and integrate API security solutions into existing enterprise environments, including API gateways, cloud platforms, and hybrid infrastructure.
Secure live APIs and service integrations in collaboration with API owners.
Participate in on-call rotations supporting critical security infrastructure.
Respond to security incidents including investigation, remediation, and recovery.
Automate operational tasks to improve reliability and reduce manual effort.
Work directly with engineering teams and vendors to resolve issues and deliver fixes.
Engage with API owners, engineering teams, and platform teams across Telstra to embed secure by design practices.
Provide subject matter expertise and guidance on API security to business and technical stakeholders.
Identify security risks and issues and recommend mitigation strategies.
Contribute to continuous improvement of security capabilities, standards, and patterns.
About You
Key Skills & Experience
Proven experience in security engineering, with a strong focus on API security.
Strong understanding of RESTful APIs and API security concepts (e.g. OAuth 2.0, OpenID Connect, JWT, authentication and authorisation).
Strong understanding of networking and traffic flows
Experience operating security controls in cloud or hybrid environments
Ability to respond to incidents and manage issues through to resolution
Strong stakeholder engagement skills with the ability to communicate technical concepts clearly.
Qualifications
Essential
Bachelor’s degree in Engineering, Computer Science, Information Technology, or equivalent practical experience.
5 + years engineering API Gateways or API Security
Desirable
Relevant cyber security certification (e.g. CISSP, Security+, or equivalent).
Want to know if this job is worth applying to?